Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa
File: f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa (raw, json)
Hash identifier: 8bI83CdJfJWxwgzDIl2zfrKZyTN33ls72BhjC8wrga4=
Subject key identifier: 71:6A:DC:94:A3:B0:5E:CD:42:F2:21:73:64:84:A6:4A:75:06:3A:69
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A3BDC2F316D9EBC6D7528
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 173.187.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:3b:dc:2f:31:6d:9e:bc:6d:75:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=60fda91a-dd22-414c-8f39-bd15f7e1f358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:05:a1:7f:70:d4:1d:d5:4e:e7:b8:02:1e:
24:d4:9a:18:70:55:49:02:ea:fa:3c:b6:c3:3c:29:
c1:87:2f:f8:a7:c1:97:ae:23:e1:2b:64:d3:85:f9:
6f:38:5b:91:30:1a:9e:48:65:10:5a:1e:cb:a2:e0:
61:38:48:93:de:29:80:b9:21:0b:0c:e2:28:ac:45:
a4:24:79:04:76:9f:48:7b:45:99:62:90:8b:75:c1:
15:51:0a:72:2b:f3:69:8a:fb:49:c2:f6:28:66:1e:
50:f3:ef:bd:dd:7e:22:d1:df:86:46:00:06:41:46:
98:05:7a:84:65:fa:60:bc:ae:b1:d1:12:3b:31:61:
4d:06:e2:3b:1e:02:48:5f:06:42:d3:a4:47:ee:bc:
2f:5e:96:96:ab:bb:28:b6:ba:13:7f:b7:94:75:6c:
0a:18:6d:72:fa:5e:22:dd:5c:c6:f2:e5:41:ee:d5:
0e:e5:75:66:4c:12:dd:fd:09:aa:4b:b1:eb:ee:b4:
f5:8b:dd:11:f4:1e:47:30:ce:80:9e:af:ec:3e:28:
de:f0:d4:99:35:ca:f9:58:74:a2:4a:73:bb:93:76:
fe:41:7a:06:5b:90:8f:19:a7:60:fc:98:ff:ba:5a:
0e:6f:5a:43:70:6c:3b:4a:39:09:f0:5c:3c:aa:09:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:DC:94:A3:B0:5E:CD:42:F2:21:73:64:84:A6:4A:75:06:3A:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:7a:67:6f:64:06:f7:a9:98:a7:d1:88:45:bc:c1:9e:72:6c:
f0:29:5a:14:93:f6:18:0d:73:a8:52:bf:39:c7:dc:fa:f2:02:
04:a1:2a:7d:ff:9f:4d:f0:84:02:ca:27:64:21:1a:7d:0e:c1:
c8:ca:d9:bc:d6:ab:1d:95:ec:60:01:5d:33:72:36:0a:5f:3a:
74:67:52:fe:e9:cb:42:5a:df:e1:90:9f:30:a5:67:1f:ca:27:
d1:6c:de:57:2a:5f:10:c6:23:14:3f:4c:2d:05:0f:40:d2:e1:
78:ff:5b:7a:44:6f:66:c5:b3:11:c1:fa:80:d8:72:8d:96:64:
2b:90:3d:7f:bb:50:0a:4c:f8:9c:2b:7a:c5:46:da:84:87:8b:
a9:bd:15:7f:2b:92:59:3c:1b:2a:75:b4:b6:30:b7:1d:79:d1:
1a:84:dd:11:58:68:fa:a9:52:f4:4c:b6:f9:b3:85:29:ff:a7:
f9:ab:da:92:5f:8b:17:b9:f0:47:56:bd:c5:1b:80:77:ff:d4:
65:e0:8e:1b:6e:6b:fb:98:74:ff:8b:71:5d:de:ef:c2:63:6c:
75:68:67:e0:6c:80:94:65:b6:a4:88:ae:8b:bc:3e:60:b7:41:
f8:b7:e2:b1:62:09:7a:88:3e:4b:56:9d:26:74:f5:6c:95:32:
9b:be:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:30 2025 by rpki-client